Suspected Bot List [2013-10-30]

detection period: 2013-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 352

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	200.41.181.170	Argentina
AR	200.55.57.214	Argentina
CA	70.38.64.167	Canada
CM	41.202.206.53	Cameroon
CN	150.255.104.90	China
CN	150.255.175.63	China
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	59.93.129.241	India
IN	117.203.140.123	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	94.183.223.16	Iran
IR	193.19.145.195	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.134.251	Macau
MO	60.246.146.143	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MY	203.142.53.200	Malaysia
NP	202.79.52.53	Nepal
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.155	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SG	112.140.184.245	Singapore
SK	62.197.209.93	Slovakia
TW	115.165.226.35	Taiwan
TW	119.77.206.197	Taiwan
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	69.64.36.109	United States
US	74.222.3.249	United States
US	192.30.87.242	United States
US	209.239.112.104	United States
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-10-30]

detection period: 2013-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 4288
number of botnet IPs notified to network operators: 3936
number of spam blocked: 101564
recipient count of spam blocked: 3216131

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	893
2	CMNET	355
3	CRTC	234
4	CHINANET-GD	164
5	CTTNET	148
6	UNICOM-SD	111
7	UNICOM-LN	96
8	UNICOM-HE	78
9	UNICOM-HL	62
10	UNICOM-HA	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2205
2	Taiwan	923
3	United States	216
4	Brazil	64
5	Italy	58
6	Spain	43
7	Argentina	43
8	Mexico	41
9	United Kingdom	38
10	Russian Federation	37

Suspected Bot List [2013-10-29]

detection period: 2013-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 134

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
CA	70.38.64.167	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	94.183.223.16	Iran
KZ	109.229.189.175	Kazakhstan
MX	189.204.49.66	Mexico
NP	202.79.52.53	Nepal
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
TW	211.76.90.150	Taiwan
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-10-29]

detection period: 2013-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2363
number of botnet IPs notified to network operators: 2232
number of spam blocked: 96298
recipient count of spam blocked: 3162814

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	826
2	CHINANET-GD	143
3	CMNET	119
4	CRTC	76
5	UNICOM-LN	46
6	UNICOM-GD	40
7	CHINANET-FJ	38
8	CTTNET	37
9	UNICOM-HE	31
10	UNICOM-SD	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	967
2	Taiwan	840
3	United States	98
4	Brazil	38
5	Russian Federation	30
6	Canada	25
7	Italy	23
8	United Kingdom	23
9	India	21
10	Mexico	18

Suspected Bot List [2013-10-28]

detection period: 2013-10-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 300

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AR	190.14.170.249	Argentina
AR	200.55.57.214	Argentina
CA	70.38.64.167	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-10-28]

detection period: 2013-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2212
number of botnet IPs notified to network operators: 1912
number of spam blocked: 88513
recipient count of spam blocked: 2961382

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	777
2	CHINANET-GD	125
3	CHINANET-JS	51
4	CHINANET-FJ	42
5	CMNET	32
6	UNICOM-LN	30
7	CHINANET-AH	30
8	CTTNET	25
9	UNICOM-HE	21
10	CHINANET-JX	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	787
2	China	580
3	United States	115
4	Brazil	59
5	Spain	56
6	Argentina	44
7	Italy	34
8	Germany	33
9	Colombia	33
10	Peru	29

Suspected Bot List [2013-10-27]

detection period: 2013-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 179

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
CA	70.38.64.167	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MY	203.142.53.200	Malaysia
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-27]

detection period: 2013-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1752
number of botnet IPs notified to network operators: 1573
number of spam blocked: 84480
recipient count of spam blocked: 2876145

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	762
2	CHINANET-JS	93
3	CHINANET-GD	92
4	CHINANET-FJ	52
5	CTTNET	38
6	UNICOM-LN	29
7	CMNET	20
8	CHINANET-AH	20
9	UNICOM-GD	13
10	UNICOM-HE	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	771
2	China	504
3	United States	50
4	Brazil	42
5	Russian Federation	27
6	Iran	23
7	Colombia	23
8	Peru	22
9	Argentina	21
10	Mexico	16

Suspected Bot List [2013-10-26]

detection period: 2013-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 285

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
CA	70.38.64.167	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
MY	203.142.53.200	Malaysia
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	201.230.214.190	Peru
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-26]

detection period: 2013-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1826
number of botnet IPs notified to network operators: 1541
number of spam blocked: 69253
recipient count of spam blocked: 2479998

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	521
2	CHINANET-GD	129
3	CTTNET	44
4	CHINANET-FJ	37
5	UNICOM-LN	29
6	PE-TPSA-LACNIC	17
7	CHINANET-JS	17
8	UNICOM-GD	16
9	UNICOM-HE	12
10	CO-CTSE-LACNIC	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	529
2	China	486
3	United States	172
4	Argentina	44
5	Peru	40
6	Brazil	38
7	Spain	35
8	Colombia	31
9	United Kingdom	30
10	Canada	29

Suspected Bot List [2013-10-25]

detection period: 2013-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 318

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AO	196.223.13.230	Angola
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
CA	70.38.64.167	Canada
CM	41.202.206.53	Cameroon
CR	201.195.100.83	Costa Rica
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
MX	200.52.182.236	Mexico
MY	203.142.53.200	Malaysia
NP	202.79.52.53	Nepal
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	201.230.214.190	Peru
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-25]

detection period: 2013-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2401
number of botnet IPs notified to network operators: 2088
number of spam blocked: 91641
recipient count of spam blocked: 2956492

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	779
2	CHINANET-GD	162
3	CHINANET-FJ	41
4	CTTNET	35
5	UNICOM-LN	33
6	CBC-CM-4	28
7	CHINANET-JS	20
8	UNICOM-GD	16
9	UNICOM-HE	14
10	PE-TPSA-LACNIC	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	788
2	China	540
3	United States	349
4	Brazil	49
5	Spain	39
6	Peru	36
7	Canada	35
8	Argentina	33
9	Italy	31
10	Mexico	30

Suspected Bot List [2013-10-24]

detection period: 2013-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 366

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AO	196.223.13.230	Angola
AR	190.15.201.202	Argentina
AR	200.41.181.170	Argentina
CM	41.202.206.53	Cameroon
CR	201.195.100.83	Costa Rica
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.52.182.236	Mexico
NP	202.79.52.53	Nepal
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PH	119.92.60.115	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-24]

detection period: 2013-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2309
number of botnet IPs notified to network operators: 1950
number of spam blocked: 95637
recipient count of spam blocked: 2965076

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	817
2	CHINANET-GD	115
3	CMNET	31
4	CTTNET	28
5	UNICOM-LN	27
6	CHINANET-FJ	27
7	CHINANET-JX	19
8	PE-TPSA-LACNIC	18
9	CHINANET-JS	18
10	UNICOM-GD	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	826
2	China	487
3	United States	204
4	Italy	51
5	Peru	49
6	Colombia	46
7	Argentina	46
8	United Kingdom	43
9	Brazil	41
10	Spain	39

Suspected Bot List [2013-10-23]

detection period: 2013-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 415

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AO	196.223.13.230	Angola
CM	41.202.206.53	Cameroon
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NP	202.79.52.53	Nepal
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	190.233.73.68	Peru
PE	200.31.105.172	Peru
PH	119.92.60.115	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SN	41.208.150.116	Senegal
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	64.182.4.63	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-23]

detection period: 2013-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2578
number of botnet IPs notified to network operators: 2165
number of spam blocked: 119594
recipient count of spam blocked: 3301715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	717
2	CHINANET-GD	155
3	UNICOM-GD	109
4	CTTNET	40
5	CHINANET-FJ	39
6	CMNET	30
7	UNICOM-LN	27
8	CHINANET-JS	18
9	ZTWL	17
10	CHINANET-JX	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	728
2	China	702
3	United States	190
4	United Kingdom	80
5	Italy	58
6	Brazil	54
7	Argentina	52
8	Colombia	50
9	Spain	48
10	Mexico	45

Suspected Bot List [2013-10-22]

detection period: 2013-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 454

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	213.207.41.34	Albania
AR	190.15.201.202	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-22]

detection period: 2013-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3255
number of botnet IPs notified to network operators: 2803
number of spam blocked: 105231
recipient count of spam blocked: 3569259

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	849
2	UNICOM-GD	140
3	CHINANET-GD	123
4	SINGNET-SG	40
5	CHINANET-FJ	32
6	CHINANET-GX	31
7	VNPT-VNNIC-VN	26
8	CMNET	25
9	BHARTI-IN	23
10	ZTWL	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	862
2	China	711
3	United States	347
4	India	77
5	Italy	69
6	Singapore	61
7	Hong Kong	61
8	Argentina	60
9	United Kingdom	58
10	Australia	53

Suspected Bot List [2013-10-21]

detection period: 2013-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 426

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
MY	203.142.53.200	Malaysia
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-21]

detection period: 2013-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2839
number of botnet IPs notified to network operators: 2411
number of spam blocked: 136602
recipient count of spam blocked: 4162715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	944
2	UNICOM-GD	190
3	CHINANET-GD	119
4	KORNET-KR	33
5	CMNET	33
6	CHINANET-FJ	33
7	UNICOM-LN	32
8	SHENZHEN-CNC	29
9	ZTWL	28
10	CHINANET-GX	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	954
2	China	707
3	United States	245
4	United Kingdom	79
5	India	60
6	South Korea	57
7	Brazil	53
8	Spain	45
9	Mexico	39
10	Colombia	38

Suspected Bot List [2013-10-20]

detection period: 2013-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 79

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-20]

detection period: 2013-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2188
number of botnet IPs notified to network operators: 2109
number of spam blocked: 127802
recipient count of spam blocked: 4311932

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	937
2	CHINANET-GD	236
3	UNICOM-GD	178
4	CHINANET-SH	109
5	CHINANET-FJ	32
6	ZTWL	31
7	UNICOM-LN	31
8	SHENZHEN-CNC	26
9	CTTNET	24
10	CMNET	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	944
2	China	913
3	United States	41
4	Brazil	39
5	Russian Federation	29
6	South Korea	17
7	Iran	14
8	United Kingdom	10
9	Peru	9
10	Thailand	8

Suspected Bot List [2013-10-19]

detection period: 2013-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MV	202.21.182.12	Republic of Maldives
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-19]

detection period: 2013-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2112
number of botnet IPs notified to network operators: 2059
number of spam blocked: 125561
recipient count of spam blocked: 4276086

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	961
2	CHINANET-GD	255
3	UNICOM-GD	145
4	CHINANET-SH	109
5	CHINANET-FJ	41
6	UNICOM-LN	33
7	CTTNET	21
8	SHENZHEN-CNC	17
9	CMNET	17
10	CHINANET-GX	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	972
2	China	850
3	United States	37
4	Brazil	36
5	Russian Federation	26
6	Iran	14
7	Japan	13
8	United Kingdom	11
9	Thailand	10
10	India	10

Suspected Bot List [2013-10-18]

detection period: 2013-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 235

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AO	41.63.166.3	Angola
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MV	202.21.182.12	Republic of Maldives
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MY	203.142.53.200	Malaysia
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-18]

detection period: 2013-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2709
number of botnet IPs notified to network operators: 2474
number of spam blocked: 113575
recipient count of spam blocked: 3727710

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	964
2	CHINANET-GD	213
3	UNICOM-GD	176
4	CHINANET-SH	84
5	CHINANET-FJ	48
6	UNICOM-LN	37
7	ZTWL	35
8	CMNET	28
9	SHENZHEN-CNC	27
10	CHINANET-AH	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	978
2	China	937
3	United States	165
4	United Kingdom	54
5	Brazil	42
6	India	36
7	Hong Kong	29
8	Russian Federation	28
9	Australia	26
10	Canada	23

Suspected Bot List [2013-10-17]

detection period: 2013-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 199

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	61.12.113.99	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.223.16	Iran
ME	46.161.87.19	Montenegro
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	190.232.218.134	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	124.107.172.131	Philippines
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
TW	211.76.93.183	Taiwan
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	69.64.61.251	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-17]

detection period: 2013-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3011
number of botnet IPs notified to network operators: 2812
number of spam blocked: 118491
recipient count of spam blocked: 3972515

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1049
2	CHINANET-GD	214
3	UNICOM-GD	129
4	CHINANET-SH	90
5	CMNET	76
6	CHINANET-AH	41
7	CHINANET-FJ	40
8	CTTNET	39
9	UNICOM-LN	32
10	CRTC	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1064
2	China	965
3	United States	303
4	United Kingdom	49
5	Brazil	48
6	Russian Federation	38
7	Australia	35
8	India	27
9	Mexico	24
10	South Korea	24

Suspected Bot List [2013-10-16]

detection period: 2013-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 327

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	85.9.73.68	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	190.232.218.134	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-16]

detection period: 2013-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3243
number of botnet IPs notified to network operators: 2916
number of spam blocked: 115951
recipient count of spam blocked: 3874890

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1039
2	CHINANET-GD	126
3	CHINANET-SH	118
4	UNICOM-GD	75
5	CTTNET	39
6	CHINANET-AH	36
7	CHINANET-FJ	33
8	UNICOM-LN	32
9	CBC-CM-4	27
10	KORNET-KR	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1052
2	China	703
3	United States	450
4	United Kingdom	74
5	Australia	72
6	Brazil	54
7	South Korea	46
8	Canada	45
9	Japan	43
10	Peru	40

Suspected Bot List [2013-10-15]

detection period: 2013-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 580

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	85.9.73.68	Iran
IR	91.98.117.30	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-15]

detection period: 2013-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3293
number of botnet IPs notified to network operators: 2713
number of spam blocked: 115933
recipient count of spam blocked: 3837364

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	847
2	UNICOM-GD	176
3	CHINANET-GD	141
4	CHINANET-SH	81
5	CTTNET	51
6	CHINANET-FJ	50
7	CHINANET-AH	39
8	UNICOM-LN	28
9	SHENZHEN-CNC	26
10	UNICOM-FJ	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	861
2	China	834
3	United States	340
4	United Kingdom	85
5	Argentina	83
6	Spain	76
7	Brazil	74
8	Mexico	73
9	India	72
10	Italy	61

Suspected Bot List [2013-10-14]

detection period: 2013-10-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 383

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	85.9.73.68	Iran
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-14]

detection period: 2013-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2700
number of botnet IPs notified to network operators: 2317
number of spam blocked: 114655
recipient count of spam blocked: 3813737

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	929
2	UNICOM-GD	177
3	CHINANET-GD	173
4	CHINANET-SH	66
5	CTTNET	48
6	CHINANET-FJ	42
7	CMNET	31
8	SHENZHEN-CNC	27
9	UNICOM-LN	26
10	UNICOM-HE	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	945
2	China	777
3	United States	120
4	Brazil	58
5	Spain	57
6	Italy	55
7	India	47
8	Iran	46
9	Argentina	37
10	Peru	35

Suspected Bot List [2013-10-13]

detection period: 2013-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 239

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	85.9.73.68	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-13]

detection period: 2013-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2326
number of botnet IPs notified to network operators: 2087
number of spam blocked: 95969
recipient count of spam blocked: 3207114

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	963
2	CHINANET-GD	159
3	UNICOM-GD	135
4	CHINANET-FJ	44
5	CTTNET	36
6	UNICOM-LN	26
7	CHINANET-SH	26
8	CHINANET-JS	18
9	SHENZHEN-CNC	17
10	CMNET	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	971
2	China	661
3	United States	65
4	Brazil	55
5	Spain	49
6	Argentina	39
7	Colombia	31
8	United Kingdom	30
9	Italy	29
10	Russian Federation	24

Suspected Bot List [2013-10-12]

detection period: 2013-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	190.181.113.5	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	190.223.178.142	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-12]

detection period: 2013-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1808
number of botnet IPs notified to network operators: 1757
number of spam blocked: 77657
recipient count of spam blocked: 2540946

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	898
2	UNICOM-GD	174
3	CHINANET-GD	111
4	CHINANET-FJ	44
5	CTTNET	40
6	UNICOM-LN	29
7	CHINANET-JS	17
8	GWBN-GUANGZHOU	13
9	ZTWL	12
10	CMNET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	903
2	China	631
3	United States	40
4	Brazil	37
5	Russian Federation	24
6	United Kingdom	15
7	Iran	11
8	Ukraine	10
9	South Korea	9
10	India	8

Suspected Bots' IP List for October 2013

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2013-10-01]
Suspected Bots IP [2013-10-02]
Suspected Bots IP [2013-10-03]
Suspected Bots IP [2013-10-04]
Suspected Bots IP [2013-10-05]
Suspected Bots IP [2013-10-06]
Suspected Bots IP [2013-10-07]
Suspected Bots IP [2013-10-08]
Suspected Bots IP [2013-10-09]
Suspected Bots IP [2013-10-10]
Suspected Bots IP [2013-10-11]
Suspected Bots IP [2013-10-12]
Suspected Bots IP [2013-10-13]
Suspected Bots IP [2013-10-14]
Suspected Bots IP [2013-10-15]
Suspected Bots IP [2013-10-16]
Suspected Bots IP [2013-10-17]
Suspected Bots IP [2013-10-18]
Suspected Bots IP [2013-10-19]
Suspected Bots IP [2013-10-20]
Suspected Bots IP [2013-10-21]
Suspected Bots IP [2013-10-22]
Suspected Bots IP [2013-10-23]
Suspected Bots IP [2013-10-24]
Suspected Bots IP [2013-10-25]
Suspected Bots IP [2013-10-26]
Suspected Bots IP [2013-10-27]
Suspected Bots IP [2013-10-28]
Suspected Bots IP [2013-10-29]
Suspected Bots IP [2013-10-30]
Suspected Bots IP [2013-10-31]

Suspected Bot List [2013-10-11]

detection period: 2013-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 247

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
AR	190.181.113.5	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	24.101.120.44	United States
US	50.159.67.200	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2013-10-11]

detection period: 2013-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2297
number of botnet IPs notified to network operators: 2050
number of spam blocked: 86919
recipient count of spam blocked: 2938037

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	966
2	UNICOM-GD	164
3	CHINANET-GD	102
4	CHINANET-FJ	36
5	CTTNET	29
6	UNICOM-LN	26
7	CMNET	19
8	UNICOM-HE	12
9	AR-CASA10-LACNIC	12
10	UNICOM-HA	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	975
2	China	583
3	United States	111
4	Brazil	53
5	Argentina	48
6	India	35
7	United Kingdom	29
8	Russian Federation	28
9	Italy	26
10	Spain	24

Suspected Bot List [2013-10-10]

detection period: 2013-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 658

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
AR	200.55.57.214	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	85.9.73.68	Iran
IR	91.98.117.30	Iran
IR	94.183.223.16	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	189.204.49.77	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	109.251.115.24	Ukraine
US	50.159.67.200	United States
US	74.222.3.249	United States
US	204.152.219.119	United States

List from greylisting:

Botnet Statistics [2013-10-10]

detection period: 2013-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 4235
number of botnet IPs notified to network operators: 3577
number of spam blocked: 86643
recipient count of spam blocked: 2910612

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	991
2	CHINANET-JS	820
3	UNICOM-GD	184
4	CHINANET-GD	94
5	CHINANET-FJ	55
6	CTTNET	34
7	KORNET-KR	31
8	UNICOM-LN	30
9	CMNET	26
10	AR-CASA10-LACNIC	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1446
2	Taiwan	1012
3	United States	404
4	United Kingdom	91
5	India	90
6	Argentina	80
7	Australia	78
8	Brazil	72
9	South Korea	69
10	Peru	51